Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 131:

  A company ships the same access point model to offices in the United States, Germany, and Japan. The wireless team notices that the available channels and maximum transmit power differ by country.

  What controls these differences?

  A. The SSID broadcast interval
  B. The management VLAN number
  C. The RADIUS shared secret length
  D. Local regulatory domain rules
  D. Local regulatory domain rules

  ---

  Explanation

  The question is not asking for a generally related feature; it is asking about A company ships the same access point model to offices in the United States, Germany, and Japan. The wireless team notices that the available channels and maximum transmit power differ by country. What controls these differences?

  That makes Local regulatory domain rules the relevant choice.

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. The chosen setting is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  The SSID broadcast interval would be considered only for a different symptom or design goal. The management VLAN number can sound related, but it does not own the behavior being tested. The RADIUS shared secret length omits the part of the configuration that actually enforces the requested outcome.

  The distractors are plausible only if the problem is misread as a different workflow.

• Question 132:

  An access point is operating on a 5 GHz DFS channel. The AP detects radar activity on that channel.

  What must the AP do to remain compliant?

  A. Continue transmitting and lower the beacon interval.
  B. Move away from the affected channel.
  C. Convert the WLAN to WPA3-Personal.
  D. Disable all 2.4 GHz radios in the same site.
  B. Move away from the affected channel.

  ---

  Explanation

  In this case, the decisive fact is An access point is operating on a 5 GHz DFS channel. The AP detects radar activity on that channel. What must the AP do to remain compliant? Move away from the affected channel. addresses that fact directly.

  The selection Move away from the affected channel. should be read against the core requirement: An access point is operating on a 5 GHz DFS channel. The AP detects radar activity on that channel. What must the AP do to remain compliant? It is the only response that works at the same layer as that requirement. RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That selection is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings. Continue transmitting and lower the beacon interval. can sound related, but it does not own the behavior being tested. Convert the WLAN to WPA3-Personal. omits the part of the configuration that actually enforces the requested outcome. Disable all 2.4 GHz radios in the same site. shifts attention away from the condition that the client, AP, or controller must satisfy. In production troubleshooting, that distinction matters because changing the wrong layer can leave the original failure untouched.

• Question 133:

  A wireless engineer is troubleshooting a hidden-node problem where two clients cannot hear each other but can hear the AP. The engineer wants a frame exchange that reserves the medium before data is sent.

  Which 802.11 frame exchange supports this function?

  A. Beacon and probe response
  B. Association request and reassociation response
  C. Deauthentication and disassociation
  D. RTS and CTS
  D. RTS and CTS

  ---

  Explanation

  RTS and CTS is preferred because it changes the behavior described here: A wireless engineer is troubleshooting a hidden-node problem where two clients cannot hear each other but can hear the AP.

  The engineer wants a frame exchange that reserves the medium before data is sent. Which 802.11 frame exchange supports this function?

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The chosen behavior maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Beacon and probe response shifts attention away from the condition that the client, AP, or controller must satisfy. Association request and reassociation response belongs to a different workflow and would leave the stated condition unresolved. Deauthentication and disassociation may be useful elsewhere, but it does not apply the control that the stem is asking for.

  The same logic applies on real deployments: fix the component that owns the failure domain first, then validate adjacent services.

• Question 134:

  Which function does FRA use to optimize client experience and network coverage?

  A. Monitoring on the physical interface level in the AP
  B. Enhances roaming by redirecting the client to move to the appropriate AP
  C. Implementation by local data path control
  D. Dynamically adapts the roles of dual-band radios in an AP
  B. Enhances roaming by redirecting the client to move to the appropriate AP

  ---

  Explanation

  For this scenario, Enhances roaming by redirecting the client to move to the appropriate AP is not just related terminology; it is the part that satisfies.

  Which function does FRA use to optimize client experience and network coverage?

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. That configuration maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Monitoring on the physical interface level in the AP may be useful elsewhere, but it does not apply the control that the stem is asking for. Implementation by local data path control changes an adjacent setting instead of the mechanism that produces the required result. Dynamically adapts the roles of dual-band radios in an AP addresses a different failure domain, so it would not close the gap described here.

  That is why the correct selection follows the requirement directly instead of merely belonging to the same Cisco wireless product family.

• Question 135:

  Refer to the exhibit.

  import requests

  import json API_ENDPOINT_URL = "https://your-network-platform.com/api/v1/wireless-clients"

  AUTH_TOKEN = "YOUR_SECRET_AUTH_TOKEN"

  headers = {

  "Content-Type": "application/json",

  "Authorization": f"Bearer {AUTH_TOKEN}"

  }

  print("Requesting wireless client data from the API...") try: response = requests.get(API_ENDPOINT_URL, headers=headers, timeout=10) response.raise_for_status

  ()

  client_data = response.json()

  print("Successfully retrieved and parsed data.\n")

  print("--- Wireless Client Details ---")

  if isinstance(client_data, list) and client_data:

  for client in client_data:

  mac_address = client.get("macAddress", "N/A") ip_address = client.get("ipAddress", "N/A") ssid = client.get ("ssid", "N/A")

  print(f"Client MAC: {mac_address}, IP: {ip_address}, SSID: {ssid}") else:

  print("No client data found or the data format is unexpected.") except requests.exceptions.RequestException as e:

  print(f"An error occurred during the API request: {e}")

  except json.JSONDecodeError:

  print("Failed to parse the API response. It may not be valid JSON.")

  A network engineer is investigating how json library is used within a Python script designed to access response content from a Cisco wireless network API endpoint.

  The engineer wants to better understand how the script uses these elements to process device information.

  Which approach does the script use to achieve its data extraction goal?

  A. dumps function
  B. loads function
  C. split method
  D. to_dict method
  B. loads function

  ---

  Explanation

  The useful clue is this requirement: import requests import json API_ENDPOINT_URL = 'API_ENDPOINT_VALUE' AUTH_TOKEN = 'YOUR_SECRET_AUTH_TOKEN' headers = { 'Content-Type':

  'application/json', 'Authorization': f'Bearer {AUTH_TOKEN}' } print('Requesting wireless client data from the API...') try: response = requests.get(API_ENDPOINT_URL. That clue points to loads function.

  Automation questions are best answered by separating transport, model, and parsing roles. NETCONF transports operations, YANG defines the data structure, JSON parsing creates usable objects, and code methods retrieve values. That configuration performs the role named in the question; the alternatives are different programming or automation concepts and would not produce the requested result.

  dumps function omits the part of the configuration that actually enforces the requested outcome. split method shifts attention away from the condition that the client, AP, or controller must satisfy. to_dict method belongs to a different workflow and would leave the stated condition unresolved.

  The key lesson is that Cisco wireless features are usually scoped tightly, and the scope determines whether a choice is usable.

• Question 136:

  Refer to the exhibit.

  

  A WLC is deployed at a branch location to facilitate secure client connectivity. A network engineer configures one WLAN using WPA2 Personal passphrase and activates ASCII format key to align with company security policies.

  Which configuration enables client authentication for this WLAN?

  A. no security wpa akm dot1x
  B. client dhcp-proxy enable
  C. security wpa wpa2 ciphers aes
  D. security wpa akm psk set-key ascii 0
  D. security wpa akm psk set-key ascii 0

  ---

  Explanation

  The controlling requirement is A WLC is deployed at a branch location to facilitate secure client connectivity. A network engineer configures one WLAN using WPA2 Personal passphrase and activates ASCII format key to align with company security policies. Which configuration enables client authentication for this WLAN? The choice security wpa akm psk set-key ascii 0 maps to that requirement directly.

  The requirement points to: A WLC is deployed at a branch location to facilitate secure client connectivity. A network engineer configures one WLAN using WPA2 Personal passphrase and activates ASCII format key to align with company security policies. Which configuration enables client authentication for this WLAN?

  The requirement is met by security wpa akm psk set-key ascii 0 because it owns the behavior being tested.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. That selection is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area. no security wpa akm dot1x shifts attention away from the condition that the client, AP, or controller must satisfy. client dhcp-proxy enable belongs to a different workflow and would leave the stated condition unresolved. security wpa wpa2 ciphers aes may be useful elsewhere, but it does not apply the control that the stem is asking for. The same logic applies on real deployments: fix the component that owns the failure domain first, then validate adjacent services.

• Question 137:

  Refer to the exhibit.

  

  The Catalyst 9800 WLC logs show when a client with MAC address 9C:4E:36:8A:2B:F1 fails to connect to a WLAN configured for Wi-Fi Protected Access 3-Enterprise with 802.1X.

  Which action must the engineer take to resolve the issue?

  A. Ensure that the AP is using the appropriate credentials.
  B. Change the WLAN to Wi-Fi Protected Access 2-Personal and configure a preshared key.
  C. Verify the client's Active Directory credentials and ensure that the RADIUS server is reachable.
  D. Disable RADIUS NAC on the policy profile assigned to the WLAN.
  C. Verify the client's Active Directory credentials and ensure that the RADIUS server is reachable.

  ---

  Explanation

  In this case, the decisive fact is The Catalyst 9800 WLC logs show when a client with MAC address 9C:4E:36:8A:2B:F1 fails to connect to a WLAN configured for Wi-Fi Protected Access 3-Enterprise with 802.1X. Which action must the engineer take to resolve the issue? Verify the client's Active Directory credentials and ensure that the RADIUS server is reachable. addresses that fact directly.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This choice is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  Ensure that the AP is using the appropriate credentials. changes an adjacent setting instead of the mechanism that produces the required result. Change the WLAN to Wi-Fi Protected Access 2-Personal and configure a preshared key. addresses a different failure domain, so it would not close the gap described here. Disable RADIUS NAC on the policy profile assigned to the WLAN. is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.